Smackcoders WordPress Lead Form Data Collection to CRM Privilege Escalation Vulnerability

A missing authorization vulnerability has been identified in the Smackcoders WordPress Lead Form Data Collection to CRM plugin, affecting versions through 3.1. This vulnerability allows for privilege escalation, enabling a low-privileged user to gain higher privileges on the site.

Impact

Exploitation of this vulnerability could allow a low-privileged user to escalate their privileges, potentially leading to full control of the website.

Remediation

Users are advised to update to a version of the Smackcoders WordPress Lead Form Data Collection to CRM plugin that is later than 3.1. For those unable to update immediately, Patchstack offers a virtual patch that can be applied to mitigate the vulnerability.